In-Vehicle Frame Transmission Prevention via Dynamic ECU Status
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing in-vehicle network systems face challenges in properly managing frame transmission after the vehicle's manufacturing phase, particularly when ECUs are added or replaced, leading to potential false detection of attack frames and prevention of legitimate frame transmission.
Innovation Solution
A frame transmission prevention apparatus and method that utilize a reception unit and processing unit to determine whether to prevent frame transmission based on management information, allowing for dynamic adjustment of transmission permissions, thereby distinguishing between attack frames and non-attack frames.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If frame transmission prevention is performed based on predetermined rules (ID and communication interval), then attack frames can be detected, but legitimate frames from added or replaced ECUs are falsely prevented from transmission
Solution Approach 1:
The system dynamically adjusts the frame transmission prevention strategy based on ECU status information. When an ECU is added or replaced, the system updates its knowledge base and modifies the prevention rules accordingly, transitioning from static predetermined rules to dynamic adaptive rules that accommodate network changes while maintaining security
Solution Approach 2:
The system implements a feedback mechanism where ECU status information (addition, replacement, or normal operation) is continuously monitored and fed back to adjust the frame transmission prevention behavior. This feedback loop enables the system to distinguish between legitimate frames from new ECUs and malicious attack frames by learning from network changes
2Reliability
If frame transmission is prevented for all frames with same ID within communication interval, then transmission security is improved, but normal communication between multiple ECUs is disrupted
Solution Approach 1:
The system applies different prevention qualities to different ECUs based on their status. Instead of uniformly preventing all frames with the same ID, the system selectively applies prevention only to frames from ECUs that are not recognized as legitimate (i.e., ECUs whose status is not recorded in the ECU status information), thereby maintaining security while allowing normal communication from legitimate ECUs
Solution Approach 2:
The system changes the parameter of frame transmission prevention based on ECU status. By using ECU status information as an additional parameter beyond just ID and communication interval, the system can differentiate between legitimate and malicious frames, allowing normal communication to proceed while blocking only suspicious transmissions
Data Source
Figure 1
Figure 2
Figure 3~5
AI summary
A frame transmission prevention apparatus is connected to a bus of a network system including a plurality of electronic control units that communicate with one another via the bus. The apparatus includes a reception unit that receives a frame from the bus and a processing unit that switches whether to perform a predetermined process for preventing transmission of the frame received by the reception unit if the received frame satisfies a predetermined condition on the basis of management information indicating whether prevention of transmission of a frame is permitted.